---
typeId: req
recordId: benac-blob-008
fields:
  title: Private blob identity
  statement: Benac shall define how private encrypted blobs represent ciphertext
    CIDs and, where local policy permits, plaintext CIDs or plaintext
    verification metadata. Benac shall not require public disclosure of
    plaintext CIDs or plaintext digest metadata for sensitive private blobs.
  rationale: Plaintext CIDs or digest metadata can leak information about private content.
  verification: Encrypted private blob tests distinguish ciphertext CID from
    plaintext verification metadata.
  testable: true
  status: draft
  area: BENAC-BLOB
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.5 Content-addressed blob store and content availability
  order: 52
---
